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Claims 



We claim: 



1 LA method for authenticating d x identities using two prime numbers p and q 

2 such that q\p- 1, each identity includes a private key 5/ and a public key v h 

3 and a publicly known generator is a such that a q = 1 (mod p), comprising: 

4 providing, a verifier, with an ordered list of the public keys v,-; 

5 selecting uniformly at random, by a prover, a non-negative number r 

6 less than q\ 

7 sending a number x = a r (mod p) from the prover to a verifier; 

8 selecting uniformly at random, by the verifier, a non-negative number 

9 e less than 2 {t+logd) , where log is base 2, and a number / is a predetermined 

1 0 security parameter; 

1 1 receiving by the prover from the verifier the number e\ 

12 generating, by the prover, a number y = r +2J s ( * e l (mod q)\ 

13 sending by the prover to the verifier the number y\ 

14 determining if an equality x = a y * IJi (v,-)*" (mod p) is true; and 

15 accepting the prover as having the d t identities if and only if the 

16 equality is true. 

1 2. The method of claim 1, in which the security parameter is 95. 

1 3. The method of claim 1, in which the sending and receiving by the prover 

2 is performed by a single LED of an optical communications device. 
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1 4. The method of claim 4, further comprising: 

2 driving the LED in forward bias to emit light; and 

3 driving the LED in reverse bias to sense light. 

1 5. The method of claim 1, in which the LED is coupled to pins of a 

2 microcontroller via a current limiting resister, and the microcontroller is 

3 operated by a switch. 

1 6. The method of claim 3, in which the LED operates as a flashlight while 

2 authenticating. 

1 7. The method of claim 1, in which the sending and receiving by the prover 

2 is performed by a microcontroller of a smart card. 

1 8. The method of claim 1, in which the generating uses a fast Fourier 

2 transform. 

1 9. The method of claim 1 , further comprising: 



2 storing, in a memory accessible by the prover, a table, for each private 

3 key v h a residue modulo q of a product of the private key v, with numbers n 

4 expressed as powers of 2 from 2 1 to 2 1 + log q \ and 

5 multiplying a particular private key with a particular number n by 

6 adding the corresponding residue to the private key. 

1 10. The method of claim 1, further comprising: 

2 storing in a memory accessible by the prover, for each residue modulo 

3 q of a product of e with powers of 2 from 2 ] to 2 1 + log q . 
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